Re: security not a big priority?

["Francois Yang" <francois.y () gmail com>]

I have already done some vulnerability testings from the outside and
pointed out some things that needed to be changed.  And again, it's
gone no where.
Just more items added to my list.
And do I really want to hack into my network and break something?  I
shouldn't have to do that.  something should be done proactively.  I
already know the vulnerabilities, I just need to fix them.


On 2/15/07, Thompson,  Jeremy <jeremy.thompson () thewintergrp com> wrote:
> Attack the network from the outside and show him the importance of
> security.
>
>
> -----Original Message-----
> From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
> On Behalf Of Francois Yang
> Sent: Wednesday, February 14, 2007 2:33 PM
> To: security-basics () securityfocus com
> Subject: security not a big priority?
>
> So I have a problem and like to know what you guys think.
> I'm a Security Analyst at an Education institute. A community college to
> be more precise.
> So I was brought on board to address security issues and work on making
> this place a better place.  Now the problem is.
> 1. I'm in the network operation team.  no security group.
> 2. My boss doesn't seem to know much about security.
> 3. My boss doesn't seem to think highly of security since all my
> projects seems to be of low priority.
> 4. I have a long list of things that needs to be done and they are all
> waiting for the engineers to work on it. But again they have better
> things to do.
> So what am I suppose to do? look for another job? :) anyone run into
> this problem before?
> I'm at the point where I'm not sure what to do.
>
>
> Thanks.
>
>
> --
> If you think technology can solve your security problems, then you don't
> understand the problems and you don't understand the technology.
> Bruce Schneier


--
If you think technology can solve your security problems, then you
don't understand the problems and you don't understand the technology.
Bruce Schneier